PT-2017-15207
CVE-2017-2143
·
Publicado
2017-04-28
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
5.3
MédiaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
CS-Cart Japanese Edition versions 4.3.10-jp-1 and earlier
CS-Cart Multivendor Japanese Edition versions 4.3.10-jp-1 and earlier
Description
The issue allows remote attackers to bypass access restrictions and create a request to return a customer-purchased item. This is achieved via the "rma.post.php" endpoint.
Recommendations
For CS-Cart Japanese Edition versions 4.3.10-jp-1 and earlier, consider restricting access to the "rma.post.php" endpoint until a fix is available.
For CS-Cart Multivendor Japanese Edition versions 4.3.10-jp-1 and earlier, consider restricting access to the "rma.post.php" endpoint until a fix is available.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾